Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Aw9iQRMnysx44DC-xxU6wssYl0M.roa
File: Aw9iQRMnysx44DC-xxU6wssYl0M.roa (raw, json)
Hash identifier: k4MbyB9sQB2oB8P7RBCq4Q+i7+XLsBbRQc3x6UGFEVU=
Subject key identifier: 03:0F:62:41:13:27:CA:CC:78:E0:30:BE:C7:15:3A:C2:CB:18:97:43
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01964A4D1FE7B7925553D6BC5C25F3BB56DA
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Aw9iQRMnysx44DC-xxU6wssYl0M.roa
Signing time: Fri 18 Apr 2025 19:08:10 +0000
ROA not before: Fri 18 Apr 2025 19:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 194.32.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:4d:1f:e7:b7:92:55:53:d6:bc:5c:25:f3:bb:56:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 18 19:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=030f62411327cacc78e030bec7153ac2cb189743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:95:a0:e7:f2:74:49:49:1c:59:08:e9:7e:52:
cc:b4:70:5a:36:46:60:df:bc:e7:a7:9a:e7:0b:2f:
9f:7c:4c:af:f7:74:62:90:fd:81:89:d3:18:ef:3c:
34:64:68:11:05:8c:8d:dc:93:b5:f6:2b:55:c0:d0:
29:21:4b:73:c3:a2:71:8c:42:fc:92:89:5d:d4:85:
e9:b7:5c:2b:30:61:40:50:f6:fb:fb:8c:43:6c:6a:
14:9d:28:1c:25:4c:28:24:ae:29:3b:ee:c9:83:da:
c6:b5:64:a7:9e:32:46:e4:1a:b5:8d:14:f0:05:75:
32:eb:b5:1e:5f:8a:ab:ac:76:7a:1a:a8:ac:dd:87:
77:bb:aa:00:46:b9:47:f8:3e:48:29:06:6b:d6:6d:
70:7b:c7:4c:77:7a:cb:f1:94:bd:c4:0c:cf:c1:b5:
77:4f:c3:ea:9c:75:03:d6:21:08:32:a0:17:34:de:
b9:61:e9:50:87:e7:a7:96:5e:f5:1c:2e:fc:a0:69:
2b:c7:45:06:3c:f7:3c:5a:32:0a:8d:34:0a:9a:06:
2a:eb:15:e6:02:ef:e3:b6:66:c8:a9:22:a2:37:ab:
5a:52:fb:57:52:d8:92:75:c0:00:18:af:61:e9:1e:
3f:8d:e8:d3:f3:b4:7f:6b:d1:5a:5a:57:df:a9:ef:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0F:62:41:13:27:CA:CC:78:E0:30:BE:C7:15:3A:C2:CB:18:97:43
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Aw9iQRMnysx44DC-xxU6wssYl0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.125.0/24
Signature Algorithm: sha256WithRSAEncryption
22:98:11:9e:a5:6d:5f:ff:ec:c0:bd:74:ed:87:84:f0:7f:ec:
77:f3:1b:5a:f9:90:62:0f:4e:4d:eb:a5:73:22:54:6e:6c:7e:
da:5d:25:74:14:6f:3a:51:1c:c0:76:fe:09:39:41:62:99:f1:
6c:f1:e6:36:5f:85:74:b3:c9:e9:06:7d:d0:4c:fe:6f:06:02:
5a:ba:e9:e4:07:76:ca:29:db:64:28:ea:56:48:c8:9d:e3:f5:
a8:78:57:70:ef:db:27:0e:38:b8:f0:f6:76:0e:6a:6d:8e:37:
58:71:a7:cf:a7:15:52:5a:51:92:98:41:21:88:70:15:a5:77:
19:eb:28:7b:18:09:a4:9d:b5:25:1b:da:33:4c:38:16:00:92:
86:ae:82:82:31:3a:f2:be:fc:1c:cb:e3:b8:5b:ba:64:01:e2:
2b:a4:21:0f:c1:0d:7f:7d:44:1f:c2:18:c0:d1:9d:f3:33:74:
cb:5f:dd:00:8e:f4:76:55:9e:dd:63:fe:86:6b:8f:aa:2b:12:
4d:bc:d2:f6:62:e8:5e:50:eb:22:1f:39:c2:d3:a4:42:84:e9:
a6:81:d0:d7:98:f4:f2:02:9d:ac:4c:f0:0f:35:7d:ad:8a:a4:
ea:f5:59:f0:36:df:da:e2:0a:36:6d:2e:36:94:f3:a6:e9:f1:
2f:99:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:32:46 2025 by rpki-client